ABOUT INNOCAP
Innocap is the leading Dedicated Managed Account Platform (DMAP) globally, providing institutional allocators with a superior way to structure, access, and oversee their alternative investments. With over US$135 billion on the platform and more than 570 employees across the globe, we are transforming how allocators access and manage alternative investments.
Powered by our people, processes and purpose‑built technology, Innocap is seeking forward-thinking individuals to join us on our exciting journey. At Innocap, you won't just manage what’s here today. You’ll build what comes next. Here, careers are about building, not maintaining.
We give our people the freedom to think boldly, move quickly, and create real impact with less red tape. Driven by transformation, trust and collaboration, we never settle for the status quo and are constantly finding better ways to serve our clients and actively shape the future of the investment industry.
At Innocap, your work makes a difference every day – and helps build what’s next for our clients, the industry, and your career.
Because the future doesn’t build itself. We do.
ABOUT THE ROLE
As Innocap’s senior cybersecurity leader, the Global Head of Cybersecurity defines and executes the firm’s global cybersecurity strategy and operating model. Reporting to the Chief Technology Officer, this role safeguards the confidentiality, integrity, availability and resilience of Innocap’s information assets, technology platforms and critical business services while enabling the firm’s growth, innovation and client commitments.
Operating at an enterprise level, the role advises executive leadership on cyber risk, establishes the firm’s security posture and risk-based priorities, and provides independent challenge and escalation on material cybersecurity matters. The Global Head leads a global team of employees, consultants and security partners and works closely with Technology, Risk, Compliance, Legal, Privacy, Internal Audit and business leaders to embed security by design across the organization.
The Global Head of Cybersecurity’s primary responsibilities include:
- Own and continuously evolve the global cybersecurity strategy, target operating model, policies, standards and multi-year roadmap, aligned with the firm’s business strategy, risk appetite and recognized frameworks such as SOC 2 and ISO/IEC 27001.
- Establish a consistent enterprise approach to identifying, assessing, prioritizing, treating and accepting cyber risk. Maintain a clear view of material risks, control gaps, threat exposure and remediation priorities, and integrate cyber risk into enterprise risk management.
- Provide concise, decision-oriented reporting to executive leadership and relevant governance bodies on cyber risk, threat trends, incidents, control effectiveness, regulatory exposure, investment priorities and program performance. Escalate material risks and incidents promptly.
- Set security architecture principles and ensure security is embedded throughout the technology and product lifecycle, including Microsoft Azure, Microsoft 365, identity, networks, applications, data platforms, business intelligence, software development, cloud services and artificial intelligence solutions.
- Lead the global security operations capability, including monitoring, threat intelligence, detection engineering, vulnerability management and incident response. Act as the executive escalation point for significant events and direct containment, investigation, recovery, root-cause analysis and lessons learned.
- Strengthen organizational resilience by defining cyber crisis management, response and recovery capabilities; conducting exercises and simulations; and partnering with Technology and the business to validate recovery strategies for critical services and data.
- Oversee the security strategy for identity and access management, privileged access, data protection, encryption, information handling and zero-trust principles. Ensure controls are proportionate to data sensitivity, business criticality and evolving threats.
- Own the cybersecurity components of the third-party risk management lifecycle, including due diligence, risk tiering, contractual requirements, ongoing monitoring, issue remediation and incident coordination for critical vendors and cloud service providers.
- Build, develop and retain a high-performing global cybersecurity team and partner ecosystem. Define clear accountabilities, succession and capability plans; oversee budgets and vendors; and drive enterprise-wide security awareness, role-based learning and a strong culture of cyber accountability.
PRIMARY QUALIFICATIONS & SKILLS
- University degree or equivalent relevant training in cybersecurity, computer science, information technology, engineering or a related field.
- Typically 15+ years of progressive cybersecurity, technology risk or information security experience, including substantial experience leading a global or multi-region security function in a complex, regulated environment.
- Demonstrated experience operating with a CISO-level mandate, shaping enterprise strategy, advising senior executives and communicating material risk to non-technical decision-makers.
- Deep knowledge of cybersecurity governance, enterprise risk management, security architecture, cloud security, incident response, resilience, threat management, data protection and third-party risk.
- Advanced experience securing Microsoft Azure and Microsoft 365 environments, with a strong understanding of modern identity, zero-trust, application security, DevSecOps and AI-related security risks.
- Practical knowledge of leading frameworks and standards, including NIST CSF, ISO/IEC 27001, CIS Controls and SOC 2
- Proven success leading and developing global teams and managing SOC capabilities, external service providers, budgets and strategic security investments.
- Exceptional judgment, executive presence and influence, with the ability to balance risk reduction, operational resilience, client expectations and business enablement.
- Excellent written and verbal communication skills in English, with the ability to translate complex technical matters into clear business implications and decisions. French knowledge is an asset.
- Knowledge of financial markets, alternative investments, asset servicing or the hedge fund industry is a strong asset.
- Relevant certifications such as CISSP, CISM, CRISC, CCSP or equivalent are assets
#LI-Hybrid
Innocap is an equal opportunity employer. We are dedicated to hiring diverse talent and fostering an inclusive, equitable, and people-first culture where everyone feels valued, respected, and empowered to contribute fully – regardless of their background. With employees across the globe, we firmly believe that the unique perspectives and strengths of our people help us grow stronger and allow us to better serve our clients.
If you require accommodation at any stage during your application process, please let us know.
Innocap's Global Privacy Notice
